Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Explicit proxy for azure firewall policy #18642

Merged
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
25 commits
Select commit Hold shift + click to select a range
3b8c40c
Added ExplicitProxySettings parameter to firewall policy cmdlets
Jun 7, 2022
3f39ed5
Added New-AzFirewallPolicyExplicitProxy cmdlet
Jun 8, 2022
ded5a1e
Updated help with ExplicitProxySettings parameter and examples
Jun 8, 2022
e8d9691
Merge branch 'network-2022-01-01' into explicitProxy-firewall-policy
Jun 8, 2022
ccc9a34
Added explicit proxy unit tests
Jun 15, 2022
41a20f7
update ChangeLog.md
Jun 16, 2022
ba88701
Renamed ExplicitProxySettings to ExplicitProxy
Jun 20, 2022
99703c4
Added Session Record for explicit proxy unit test
Jun 20, 2022
5f75b3e
Updated help
Jun 20, 2022
f368611
Merge branch 'network-2022-01-01' into explicitProxy-firewall-policy
VeryEarly Jun 23, 2022
8a36614
Generated help for New-AzFirewallPolicyExplicitProxy
Jun 23, 2022
514c776
Merge branch 'explicitProxy-firewall-policy' of https://github.com/Gi…
Jun 23, 2022
2551fbb
Merge branch 'network-2022-01-01' into explicitProxy-firewall-policy
VeryEarly Jul 11, 2022
fd9630f
Added local Network SDK to include latest features added on explicit …
Jul 12, 2022
79d0920
Updated Network SDK and deleted local feed
Jul 20, 2022
7877294
Added local Network SDK to include latest features added on explicit …
Jul 12, 2022
d79a442
Updated Network SDK and deleted local feed
Jul 20, 2022
2dacf9f
resolved conflict
Jul 20, 2022
42444e5
Update ChangeLog.md
Jul 20, 2022
d12222e
Update PSAzureFirewallPolicySNAT.cs
Jul 20, 2022
cc29a55
Added sample outputs
Jul 21, 2022
491bc6a
Updated related links
Jul 22, 2022
0e853ed
Merge branch 'network-2022-01-01' into explicitProxy-firewall-policy
BethanyZhou Jul 25, 2022
23cef04
Added sample output
Jul 25, 2022
e15efb9
Merge branch 'network-2022-01-01' into explicitProxy-firewall-policy
BethanyZhou Jul 26, 2022
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -148,12 +148,21 @@ public void TestAzureFirewallPolicyPrivateRangeCRUD()
{
TestRunner.RunTestScript("Test-AzureFirewallPolicyPrivateRangeCRUD");
}

[Fact]
[Trait(Category.AcceptanceType, Category.CheckIn)]
[Trait(Category.Owner, NrpTeamAlias.azurefirewall)]
public void TestAzureFirewallPolicyBasicSku()
{
TestRunner.RunTestScript("Test-AzureFirewallPolicyBasicSku");
}

[Fact]
[Trait(Category.AcceptanceType, Category.CheckIn)]
[Trait(Category.Owner, NrpTeamAlias.azurefirewall)]
public void TestAzureFirewallPolicyExplicitProxyCRUD()
{
TestRunner.RunTestScript("Test-AzureFirewallPolicyExplicitProxyCRUD");
}
}
}
Original file line number Diff line number Diff line change
Expand Up @@ -1558,4 +1558,59 @@ function Test-AzureFirewallPolicyBasicSku {
# Cleanup
Clean-ResourceGroup $rgname
}
}
<#
.SYNOPSIS
Tests AzureFirewall Policy Explicit Proxy
#>
function Test-AzureFirewallPolicyExplicitProxyCRUD {
$rgname = Get-ResourceGroupName
$azureFirewallPolicyName = Get-ResourceName
$resourceTypeParent = "Microsoft.Network/FirewallPolicies"
$location = "westus2"
$vnetName = Get-ResourceName
$pacFile ="https://packetcapturesdev.blob.core.windows.net/explicit-proxy/pacfile.pac?sp=r&st=2022-06-02T21:14:54Z&se=2022-07-15T05:14:54Z&spr=https&sv=2021-06-08&sr=b&sig=VqX7Jfqb0P2HhuoDFDCeGLHvtM65Tu8lpkV96kCWZn0%3D"

try {

# Create the resource group
$resourceGroup = New-AzResourceGroup -Name $rgname -Location $location -Tags @{ testtag = "testval" }

$explicitProxySettings = New-AzFirewallPolicyExplicitProxy -EnableExplicitProxy -HttpPort 85 -HttpsPort 121 -EnablePacFile -PacFilePort 122 -PacFile $pacFile

# Create AzureFirewallPolicy (with Explicit Proxy Settings)
$azureFirewallPolicy = New-AzFirewallPolicy -Name $azureFirewallPolicyName -ResourceGroupName $rgname -Location $location -ExplicitProxy $explicitProxySettings

# Get AzureFirewallPolicy
$getAzureFirewallPolicy = Get-AzFirewallPolicy -Name $azureFirewallPolicyName -ResourceGroupName $rgname


#verification
Assert-AreEqual $rgName $getAzureFirewallPolicy.ResourceGroupName
Assert-AreEqual $azureFirewallPolicyName $getAzureFirewallPolicy.Name
Assert-NotNull $getAzureFirewallPolicy.Location
Assert-AreEqual (Normalize-Location $location) $getAzureFirewallPolicy.Location
Assert-NotNull $getAzureFirewallPolicy.ExplicitProxy
Assert-AreEqual 85 $getAzureFirewallPolicy.ExplicitProxy.HttpPort
Assert-AreEqual 121 $getAzureFirewallPolicy.ExplicitProxy.HttpsPort
Assert-AreEqual 122 $getAzureFirewallPolicy.ExplicitProxy.PacFilePort
Assert-AreEqual $pacFile $getAzureFirewallPolicy.ExplicitProxy.PacFile

# Modify
$exProxy = New-AzFirewallPolicyExplicitProxy -EnableExplicitProxy -HttpPort 86 -HttpsPort 123 -EnablePacFile -PacFilePort 124 -PacFile $pacFile
# Set AzureFirewallPolicy
$azureFirewallPolicy.ExplicitProxy = $exProxy
Set-AzFirewallPolicy -InputObject $azureFirewallPolicy
$getAzureFirewallPolicy = Get-AzFirewallPolicy -Name $azureFirewallPolicyName -ResourceGroupName $rgname

Assert-NotNull $getAzureFirewallPolicy.ExplicitProxy
Assert-AreEqual 86 $getAzureFirewallPolicy.ExplicitProxy.HttpPort
Assert-AreEqual 123 $getAzureFirewallPolicy.ExplicitProxy.HttpsPort
Assert-AreEqual 124 $getAzureFirewallPolicy.ExplicitProxy.PacFilePort
Assert-AreEqual $pacFile $getAzureFirewallPolicy.ExplicitProxy.PacFile
}
finally {
# Cleanup
Clean-ResourceGroup $rgname
}
}
Loading